7. Select the level of security you want to provide from one of the following trust modes:
a. Trust By Certificate
i. Click Next. The Trusted Certificates dialog box appears. The Trusted Certificates
dialog box allows trusted certificate files to be added to the Trusted Certificate
List.
ii. Click Add File to browse and select any certificates to be included in the Trusted
Certificate List. The Add File dialog box appears. If an invalid file name is entered
in the file name field, an error message appears, indicating the file does not exist.
Click OK to select another file, or click Cancel to close the dialog box. The Trusted
Certificate List appears.
Note: If you click Next without adding any certificates to the list and no certificates
exist from a previous installation, a message appears indicating that if you do not
specify any trusted certificates, HP Systems Insight Manager cannot access the HP
Web-based Agents on this system. Click OK if you do not want HP Systems Insight
Manager to access the HP Web-based Agents on this system, or click Cancel to
close the dialog box and add the trusted certificates to the list.
Note: The Trust By Certificates option enables the HP SMH system and the HP
Systems Insight Manager system to establish a trust relationship by means of
certificates. This mode is the strongest method of security because it requires
certificate data and verifies the digital signature before enabling access.
iii. Click Next. The IP Binding dialog box appears.
or
i. Click Import. The Import Server Certificate dialog box appears.
ii. Enter the name or IP address of the server whose certificate you want to import.
iii. Click Get Cert. The certificate information appears.
iv. Verify the certificate information. If you want to add this certificate to the Trusted
Certificate List, click Accept and the certificate is added to the Trusted Certificate
List, or click Cancel if you do not want to add it to the Trusted Certificate List.
The Trusted Certificate List appears.
Note: You can add an unlimited number of trusted certificates.
v. Click Next. The IP Binding dialog box appears. Click Back to return to the Trust
Mode dialog box.
Note: To delete a certificate, select the certificate and click Delete. The selected
certificate is removed.
b. Trust By Name
i. Select Trust By Name.
ii. Click Next. The Trusted Server dialog box appears.
Note: Although the Trust By Name mode is a slightly stronger method of security
than the Trust All mode, it still leaves your system vulnerable to security attacks.
The Trust By Name mode sets up HP SMH to only accept certain requests from
servers with the HP Systems Insight Manager certificate names designated in the
Trust By Name field. The Trust By Name option is easy to configure and can
prevent unauthorized access. For example, you might want to use the Trust By
Name option if you have a secure network, but your network has two groups of
administrators in two separate divisions. The Trust By Name option would prevent
one group from installing software to the wrong system. This option does not verify
anything other than the HP Systems Insight Manager certificate name submitted.
iii. Enter the names of the certificate of HP Systems Insight Manager servers you want
to trust.
28 Installing on Windows
Komentarze do niniejszej Instrukcji